CVE-2019-10583

Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8096AU, MDM9607, MSM8909W, Nicobar, QCS605, SA6155P, SDA845, SDM429W, SDM670, SDM710, SDM845, SM6150, SM8150, SM8250, SXR1130, SXR2130

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@qualcomm.com

Published

2020-01-21

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Apq8096au Firmware (Qualcomm)
• Mdm9607 Firmware (Qualcomm)
• Msm8909w Firmware (Qualcomm)
• Nicobar Firmware (Qualcomm)
• Qcs605 Firmware (Qualcomm)
• Sa6155p Firmware (Qualcomm)
• Sda845 Firmware (Qualcomm)
• Sdm429w Firmware (Qualcomm)
• Sdm670 Firmware (Qualcomm)
• Sdm710 Firmware (Qualcomm)
• Sdm845 Firmware (Qualcomm)
• Sm6150 Firmware (Qualcomm)
• Sm8150 Firmware (Qualcomm)
• Sm8250 Firmware (Qualcomm)
• Sxr1130 Firmware (Qualcomm)
• Sxr2130 Firmware (Qualcomm)
• Snapdragon Auto (Qualcomm Inc.)
• Snapdragon Compute (Qualcomm Inc.)
• Snapdragon Consumer Iot (Qualcomm Inc.)
• Snapdragon Industrial Iot (Qualcomm Inc.)
• Snapdragon Mobile (Qualcomm Inc.)
• Snapdragon Voice Music (Qualcomm Inc.)
• Snapdragon Wearables (Qualcomm Inc.)

References

• https://www.qualcomm.com/company/product-security/bulletins/january-2020-bulletin